September 8, 2026
- JSCeal ships its payloads as compiled V8 bytecode, layered with javascript-obfuscator RC4-protected strings, control-flow flattening and proxy functions. Check Point documents credential harvesting, surveillance and traffic interception, including bypassing Google authentication using stolen session cookies (The Hacker News, Security Affairs). · Threat Activity
in N-able Ships a Fourth N-central Hotfix in Five Weeks — and Can't Agree Whether It's Exploited